What does setting site=site0 on all Search Head Cluster members do in a multi-site indexer cluster?

1. A. Disables search site affinity.
2. B. Sets all members to dynamic captaincy.
3. C. Enables multisite search artifact replication.
4. D. Enables automatic search site affinity discovery.

Correct Answer: A

When troubleshooting monitor inputs, which command checks the status of the tailed files?

1. A. splunk cmd btool inputs list | tail
2. B. splunk cmd btool check inputs layer
3. C. curl https://serverhost:8089/services/admin/inputstatus/TailingProcessor:FileStatus
4. D. curl https://serverhost:8089/services/admin/inputstatus/TailingProcessor:Tailstatus

Correct Answer: C

Which command will permanently decommission a peer node operating in an
indexer cluster?

1. A. splunk stop -f
2. B. splunk offline -f
3. C. splunk offline --enforce-counts
4. D. splunk decommission --enforce counts

Correct Answer: C

Which tool(s) can be leveraged to diagnose connection problems between an indexer and forwarder? (Select all that apply.)

1. A. telnet
2. B. tcpdump
3. C. splunk btool
4. D. splunk btprobe

Correct Answer: BC

In search head clustering, which of the following methods can you use to transfer captaincy to a different member? (Select all that apply.)

1. A. Use the Monitoring Console.
2. B. Use the Search Head Clustering settings menu from Splunk Web on any member.
3. C. Run the splunk transfer shcluster-captain command from the current captain.
4. D. Run the splunk transfer shcluster-captain command from the member you would like to become the captain.

Correct Answer: BD